Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
File: ES1lq7x-8AUScohER5KrhvsVwu4.mft (raw, json)
Hash identifier: vUyx1CYTv6H2uLlucKbFSHJFrkd8IIGYE33o5QodOeE=
Subject key identifier: 3A:99:65:AB:DA:10:8B:3D:81:DF:54:41:E3:96:65:96:58:D1:16:A4
Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee
Certificate serial: 019E300589E4843581D960B7B7E84683452C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
Manifest number: 0A92
Signing time: Sat 16 May 2026 09:02:09 +0000
Manifest this update: Sat 16 May 2026 09:02:09 +0000
Manifest next update: Sun 17 May 2026 09:02:09 +0000
Files and hashes: 1: ES1lq7x-8AUScohER5KrhvsVwu4.crl (hash: GEL/zS93SYNfiv3xnrltspIWrHbD+1nntRuTl42fNfQ=)
2: NyqJ3HcC-3DqTRjPEZHaf1vVpmk.roa (hash: kzMbI7FhKbCR9OfECdQk1NAYRQo9Ic9dt4s+QetZXtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:89:e4:84:35:81:d9:60:b7:b7:e8:46:83:45:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee
Validity
Not Before: May 16 09:02:09 2026 GMT
Not After : May 17 09:02:09 2026 GMT
Subject: CN=3a9965abda108b3d81df5441e396659658d116a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:23:10:49:96:ab:39:49:db:5e:ba:37:f2:
cd:3f:07:2f:51:92:f1:7c:64:de:a0:8d:35:41:96:
a0:18:8e:c9:4d:d7:ec:03:6e:3c:85:e3:d6:57:f2:
c8:99:d2:63:70:bd:d9:14:66:38:47:78:2e:9c:89:
91:40:46:85:75:e4:36:e2:ef:de:a4:a9:5f:a8:00:
33:06:60:09:67:15:c2:28:6d:c8:5c:f7:61:74:71:
dd:07:df:e8:eb:6a:69:95:5c:af:ac:4b:17:38:16:
e2:1e:4b:2c:37:75:4b:29:db:da:f4:45:4b:f8:3c:
d3:f8:63:b6:b7:24:c1:58:d0:cf:0b:cb:bb:f1:4b:
5f:19:f4:f1:25:d0:21:0a:c4:cd:22:fd:ed:d9:76:
44:f9:6a:40:f4:22:01:8a:f4:7e:1b:35:d3:c5:18:
74:fa:69:1c:1a:f9:eb:5a:df:9b:1a:66:34:62:be:
eb:a6:f9:3c:fb:a8:29:12:50:ce:b7:54:ad:af:08:
91:9e:f5:42:14:a2:fe:e6:5c:bf:d2:4e:39:06:fb:
a0:46:b6:c3:49:71:17:11:c2:26:69:c4:2a:bb:68:
3a:cf:84:08:53:90:2d:74:4c:86:67:0f:b1:87:ab:
a3:5b:52:8b:93:55:a2:0d:29:0f:b4:f7:7a:76:81:
d1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:99:65:AB:DA:10:8B:3D:81:DF:54:41:E3:96:65:96:58:D1:16:A4
X509v3 Authority Key Identifier:
keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:80:3a:de:da:9e:d8:d2:e9:61:9c:15:73:b3:38:5e:3c:1a:
c7:07:e2:de:43:fd:03:ad:46:49:7b:de:5d:2d:60:35:8f:eb:
75:29:2a:ee:87:c7:2b:85:0c:89:9e:07:63:8a:df:0c:f9:86:
e8:fc:74:03:bf:ac:62:ae:94:80:70:1f:2d:ab:30:ea:ee:9e:
6d:5b:c8:7b:c2:66:8e:8b:76:88:0f:06:24:44:f1:bd:f3:be:
1a:81:be:ef:a2:1d:56:c8:92:f4:8e:d5:85:b5:a2:cc:69:9a:
ab:7e:9a:64:1e:05:59:76:b5:c5:b2:bf:a3:92:35:fb:91:5d:
ed:33:00:63:3a:86:28:a9:ac:d4:9d:98:1f:de:f4:20:dc:f3:
b7:ed:62:ea:7f:82:1f:76:b9:09:c0:2e:48:69:4a:d6:b2:02:
06:1a:9b:f9:8d:f6:3f:ef:1c:b5:fc:68:da:44:e7:e7:05:30:
2e:d0:34:9e:7c:7b:4a:2f:a7:55:ec:61:fe:52:eb:46:18:3d:
82:8f:18:87:1f:78:1e:a2:ca:fa:c9:96:c0:5c:6b:f5:27:31:
0e:f4:f3:2d:7f:b2:27:88:e1:b2:84:61:9d:e5:17:2f:0f:1a:
e4:f1:fa:0f:50:f5:93:ed:bf:22:60:58:bc:15:51:48:aa:b4:
ff:80:56:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:15 2026 by rpki-client